Hi, I have just finished reading over the paper at http://luca.ntop.org/Ring.pdf (FYI good paper. This should definitely be referenced on the wiki!) and after reading that I went back and reread the README's and wiki and I have a few questions.
1. When using PF_RING, should one also enable CONFIG_PACKET_MMAP in the kernel? 2. Everything seems to mention enabling "Socket Filtering" in the kernel. I have looked at a number of different 2.6 kernels and none of them seem to have this option. What/where is this? 3. The pdf, PF_RING/kernel/README, and wiki all make mention of a RTIRQ patch. The PDF only mentions this in relation to the 2.4 kernel. Is this patch relevent to the 2.6 kernel? 4. All sources seem to point to http://home.t-online.de/home/Bernhard_Kuhn/rtirq/ for this patch but this does not appear to be correct. Where is this currently maintained? 5. I have a couple of questions about the diagram on page 6 of the pdf. num_slots is the size of each buffer, correct? On a 32 bit x86 system this can't be bigger than 4096 correct? In the case of multiple capture applications, does the NIC have to perform a write for each buffer? If so does this affect capture performance? 6. I've been trying to find out if the tg3 kernel drivers support NAPI and have come up with mixed results. Unlike some other drivers, there is no specific option for it in the kernel, but goggling around I have found some references that suggest it is enabled by default in the tg3 drivers. Does anyone know for sure if this is the case? Thx for the help, Wally _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
